Sign in

Cindʎ Xiao 🍉

@cxiao.net
397 followers 382 following 140 posts

professional strings(1) operator rust reverse engineering training -> @decoderloop.com she/her or they/them 🏳️‍🌈😎 personal account! views are mine. en_CA/zh_CN/fr_CA cxiao.net infosec.exchange/@cxiao

PostsRepliesMedia
Cindʎ Xiao 🍉 @cxiao.net · 17/09/2026
I am not very active here, find me on Mastodon: infosec.exchange/@cxiao Longer post char limits and more actual infosec practitioners there. If you think "you naive fools just need to UNDERSTAND AI's capabilities to see how great it is!": It is unlikely we will get along unless I already know you.
infosec.exchange
Cindʎ Xiao 🍉 (@cxiao@infosec.exchange)
3.99K Posts, 2.31K Following · professional strings(1) operator rust reverse engineering training -> @decoderloop personal account, personal views 🏳️‍🌈😎 only online on certain days, all responses de...
020
Reposted by Cindʎ Xiao 🍉
Marisa Kabas @marisakabas.bsky.social · 12/09/2026
man, shut the fuck up
562143198
Cindʎ Xiao 🍉 @cxiao.net · 10/09/2026
Slides for my #RustConf 2026 talk are now up! A recording will be posted some time after the conference as well, I'll post it when it's up.
012
Cindʎ Xiao 🍉 @cxiao.net · 08/09/2026
I'm here at #RustConf! I have cool cards! Feel free to find me after my talk, message me here, or message me on the conference Discord (you can find me in my talk's channel `#reverse-engineering-rust-malware-in-2026`) if you want to get one of these!
001
Reposted by Cindʎ Xiao 🍉
Emily Feng @emilyzfeng.bsky.social · 04/09/2026
Woo first copies are here! Our Hearts Burned For Home, on sale very soon October 12. The book unearths the untold story of Uyghur exiles who fled China’s expanding police state—only to become a pivotal force behind the fall of Bashar al-Assad’s regime. globalreports.columbia.edu/books/our-he...
33810
Cindʎ Xiao 🍉 @cxiao.net · 27/08/2026
If you'll be attending #RustConf in Montreal, and are interested in Rust malware, come find me and say hi! You can also watch the livestream and join the live Discord from home with a Virtual conference ticket, it's pay-what-you-want ⬇️ My talk will also be recorded and posted after!
021
Cindʎ Xiao 🍉 @cxiao.net · 24/08/2026
I finally released this binja plugin! check it out for all your Rust reversing needs
011
Cindʎ Xiao 🍉 @cxiao.net · 21/08/2026
🕯️
010
Reposted by Cindʎ Xiao 🍉
Decoder Loop @decoderloop.com · 21/08/2026
The Rust-based backdoor observed in the supply chain compromise of the `arrayref` Rust crate has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #SupplyChain #arrayref
github.com
GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.
A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
001
Reposted by Cindʎ Xiao 🍉
Decoder Loop @decoderloop.com · 21/08/2026
AmnesiaStealer, an infostealer for macOS machines, has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... #rust #rustlang #malware #infosec #ReverseEngineering #MalwareAnalysis #reversing #macOS #infostealer #AmnesiaStealer
github.com
GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.
A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
021
Reposted by Cindʎ Xiao 🍉
Decoder Loop @decoderloop.com · 19/08/2026
Still Toolkit has been added to the Rust Malware Sample Gallery: github.com/decoderloop/... Still Toolkit is notably used against Russian organizations. The dropper that delivers it is written using @tauri.app #rust #malware #infosec #ReverseEngineering #ArmoredLikho #EagleWerewolf #Tauri
github.com
GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.
A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
011
Reposted by Cindʎ Xiao 🍉
Dr. Ashok Karra @akarra.bsky.social · 15/08/2026
. @tressiemcphd.bsky.social has spoken about AI being a whole theory of politics meant to reinforce the power of the haves against the have-nots. i'll add that it is a theory centered on divide & conquer. if we are consuming content made by AI and endorse it, we starve other human beings
14715
Reposted by Cindʎ Xiao 🍉
Niao Collective @niaocollective.bsky.social · 13/08/2026
Combining bamboo with our brick-henges is a stroke of genius. Not necessarily from a practical or strategic sense, mind you. But look at this. Isn't it beautiful? There's joy and creativity (and maybe a dash of vandalism) in resistance. And also bricks. Lots of bricks.
Source: Telegram (Nov 2019)Source: Telegram (posted on Mar 2021, but obviously from earlier, likely Nov 2019)
1103
Reposted by Cindʎ Xiao 🍉
Milk Tea Alliance Calendar @mtacalendar.bsky.social · 14/08/2026
Staying with Hong Kong, @niaocollective.bsky.social posted: An expanded blog post on Eye injuries caused by Hong Kong Polices deliberate use of so called "less-lethals" And a🧵on the 2019 observation of hungry ghost festival bsky.app/profile/niao... And a great thread on engineering with bamboo! 12/
niaocollective.bearblog.dev
An Eye For An Eye
CW: eye injuries, blood On 11 August 2019, HK police shot a street medic in the face. <div style="width: 500px; max-width: 100%; margin: 0 auto;"> ...
122
Reposted by Cindʎ Xiao 🍉
China Media Project @chinamediaproject.bsky.social · 14/08/2026
AI anchors and AI-generated dramas are growing rapidly in China. But how far can a generative persona go before the illusion is broken? Meet Peach Fang. Check out our latest feature on CMP and LS!
252
Cindʎ Xiao 🍉 @cxiao.net · 14/08/2026
虽然这些数字不准确但是threads真的在台湾很火,而在海外华人圈儿也有很多人用。bluesky这里基本上还是西方英语网站,随便搜一下也找不到很多关于台湾的国语新闻。我感觉蓝天上的西方人太把自己当成世界中心了,实际上蓝天还是一个很小的平台
010
Cindʎ Xiao 🍉 @cxiao.net · 12/08/2026
oh HELL no why tf is this the default
bluesky setting interface showing app language: english. primary language: english. content languages (select which languages you want your subscribe fees to include if none are selected all languages will be shown): ENGLISH ONLY
000
Reposted by Cindʎ Xiao 🍉
Decoder Loop @decoderloop.com · 05/08/2026
We've just added these #RustLang #malware samples to the Rust Malware Sample Gallery: 1) JitterDropper 2) A Rust-based clipboard hijacker 3) #IronWorm, a Rust-based infostealer observed in several recent supply chain compromises 4) LabubaRAT github.com/decoderloop/... #infosec #reversing
github.com
GitHub - decoderloop/rust-malware-gallery: A collection of malware families and malware samples which use the Rust programming language.
A collection of malware families and malware samples which use the Rust programming language. - decoderloop/rust-malware-gallery
111
Cindʎ Xiao 🍉 @cxiao.net · 14/07/2026
If you missed the spring session of Deconstructing Rust Binaries: I'll be teaching it again this fall! October 26-31, fully virtual, all Rust RE (:
000
Reposted by Cindʎ Xiao 🍉
Niao Collective @niaocollective.bsky.social · 13/07/2026
Also explains a bit why Milk Tea Alliance was and kinda continues to be a thing. The struggles against the Thai state is related to the struggles against the junta in Myanmar is related to the struggles against the CCP in HK is related to the struggles against threats of Chinese invasion in Taiwan
0304
Reposted by Cindʎ Xiao 🍉
Niao Collective @niaocollective.bsky.social · 13/07/2026
Thailand also deported Uyghur asylum seekers who were rescued from a human-smuggling camp to China just last year, so this somehow does not surprise me
13017
Reposted by Cindʎ Xiao 🍉
不明白播客 @bumingbai.net · 10/07/2026
什么是“中华灯塔派”? 从曾经向往毛时代中国的西方左派,到今天被DeepSeek、高铁和中国城市景观震撼的网红与知识分子,他们都在用同一种方式想象中国:高效、稳定、有秩序,甚至是另一种现代化答案。 查建英说,现在看到的也许只是“一袭华丽的长袍”,而底下的虱子,迟早会浮上来。 欢迎收听、收看本期下午茶: youtu.be/3jzyYjwM5Nw
youtu.be
高铁、AI与中国世纪:中华灯塔派在向往什么?
YouTube video by 不明白播客
011
Reposted by Cindʎ Xiao 🍉
China Media Project @chinamediaproject.bsky.social · 10/07/2026
China Daily president and editor-in-chief Qu Yingpu said AI is evolving from a “cognitive tool” to an “action tool.” Read more on our CMP website or Substack: chinamediaproject.org/2026/07/09/t... linguasinica.substack.com/p/the-propag...
chinamediaproject.org
The Propaganda Promise of AI - China Media Project
Mandatory year-end accounting reports by Chinese state media treat "external propaganda" as a distinct, measurable pillar of their work. A recent policy piece by the top editor of China Daily lifts th...
032
Cindʎ Xiao 🍉 @cxiao.net · 02/06/2026
37 years, we remember, and light the candle, for those who cannot. June 4 1989 memorials in #Canada this Thursday: #Toronto: 6pm, Chinese Consulate, 240 St. George St / 7pm, march to Tiananmen memorial plaque @ U of T (www.tadc.ca/37th-june4/) #CommemoratingTiananmenIsNotACrime #八九六四 #悼念无罪 #悼念無罪
tadc.ca
37th Anniversary June 4th Memorial 「六四」37周年悼念 | Toronto Association for Democracy in China
https://www.tadc.ca/37th-june4/
101
Cindʎ Xiao 🍉 @cxiao.net · 02/06/2026
See you at RustConf! :D
021
Cindʎ Xiao 🍉 @cxiao.net · 13/05/2026
I will be at @nsec.io tomorrow and Friday, if you're there too and would like to meet up let me know! :D #NorthSec #nsec
020
Reposted by Cindʎ Xiao 🍉
Mark Copelovitch @mcopelov.bsky.social · 11/05/2026
For example, it is totally unclear to me how China is exhibiting "geopolitical restraint" or is more credible/predictable about anything while its diplomats regularly & aggressively insist Taiwan belongs to them & 73-year old Xi Jinping is completely purging the military of any opposition.
1332
Reposted by Cindʎ Xiao 🍉
Mark Copelovitch @mcopelov.bsky.social · 11/05/2026
Again, Xi/🇨🇳 may believe this, & we are stupidly trying to commit hegemonic suicide, but it's important to note that everything folks are rightly worried about in 🇺🇸 (aging personalist authoritarians, corruption, debt, repression, concentration camps, etc.) is far worse in 🇨🇳: bsky.app/profile/mcop...
1018847
Cindʎ Xiao 🍉 @cxiao.net · 11/05/2026
Very excited to present at RustConf this year! :D
031
Reposted by Cindʎ Xiao 🍉
ThreatInsight @threatinsight.proofpoint.com · 04/05/2026
Device code phishing is exploding, and AiTM actors are getting in on it. We found ODx phishing-as-a-service providing device code capabilities in addition to their AiTM offerings. ODx is one of the most popular AiTM kits currently. It's also tracked as Storm-1167 and FlowerStorm.
175
Reposted by Cindʎ Xiao 🍉
âpihtawikosisân @apihtawikosisan.bsky.social · 05/05/2026
What moral injury comes of being called racist when racism is so thoroughly rewarded?
1235
Reposted by Cindʎ Xiao 🍉
Chenchen Zhang 🤦🏻‍♀️ @chenchenzhang.net · 01/05/2026
my father was a grassroots bureaucrat who hung out with other grassroots bureaucrats. at a family banquet, my relative said telling me about politics would be 对牛弹琴 (lit. playing the lute to a cow) chenchenzhang.net/2026/05/01/o... read on and it gets more interesting
chenchenzhang.net
On (not) knowing politics
My father was a grassroots bureaucrat who hung out with other grassroots bureaucrats. A few years ago I attended a family banquet, as you usually would when returning home after being away for some…
0298
Reposted by Cindʎ Xiao 🍉
5 foot Home Depot skeleton @redderbeanpaste.bsky.social · 01/05/2026
Also shout out to @krishraghav.bsky.social whose comic I talk about in this newsletter who has a new game out 🚨 🚨 krishraghav.itch.io/dont-get-you...
krishraghav.itch.io
Don't Get Your Hopes Up by Gobi65 Games
An interactive comic about housing shortage and horror in architecture.
164
Reposted by Cindʎ Xiao 🍉
5 foot Home Depot skeleton @redderbeanpaste.bsky.social · 01/05/2026
Happy Labor Day. I wrote about Chinese work and why it’s frustrating that Americans refuse to learn about it beyond stereotypes the-haters-guide-to-international-politics.ghost.io/the-chinese-...
the-haters-guide-to-international-politics.ghost.io
The Chinese Worker and You
Support my Writing with a Tip This international Labor day, I wanted to do a small post on the nature of work in contemporary China. Why? a) I'm Chinese b) I'm a worker c) The work includes examin...
110959
Reposted by Cindʎ Xiao 🍉
China Law Translate / Jeremy Daum @chinalawtranslate.bsky.social · 28/04/2026
Again, before we make trade-offs in civil liberties for nominal security, why not look at the world's largest age-gating experiment to see if it even helps? www.project-syndicate.org/commentary/c...
project-syndicate.org
Lessons From China’s Age-Gated Internet
Jeremy Daum warns that bad actors will continuously find new ways to circumvent strict rules and mandatory guardrails.
051
Reposted by Cindʎ Xiao 🍉
Bibliothèque et Archives Canada @bibliotheque-archives.canada.ca · 27/04/2026
Installez-vous confortablement, détendez-vous et regardez comment nous retirons doucement le support papier acide au dos d’une estampe! Écouteurs recommandés 🎧 #ASMR #Restauration youtu.be/hIf46oI8XpU
youtu.be
ASMR: Retirer un support papier
YouTube video by Bibliothèque et Archives Canada
021
Reposted by Cindʎ Xiao 🍉
Niao Collective @niaocollective.bsky.social · 27/04/2026
In case I’m too cryptic - it’s Xinjiang. A lot of Chinese solar panels come from Xinjiang and are likely made by slavery www.theguardian.com/environment/...
theguardian.com
Labour accused of turning ‘blind eye to slavery’ over solar panels made in China
MPs likely to be whipped against move to add protections, as government says it is already taking action on risk of forced labour
32614
Cindʎ Xiao 🍉 @cxiao.net · 26/04/2026
Good day yesterday, picked up the new @thepeopleswant.bsky.social book (published by @haymarketbooks.org) from my local bookstore. As a coincidence, it was also #IndieBookstoreDay! I think @brianhioe.bsky.social mentioned during the book launch event that there is a Chinese version coming too (!!)
A red, white, and maroon book cover.
Revolutions of Our Times
The Peoples Want
An Internationalist Manifesto
0135
Reposted by Cindʎ Xiao 🍉
Niao Collective @niaocollective.bsky.social · 12/04/2026
A few days ago I asked about posting more protest art and expanding my essays on the HK pro-democracy movement somewhere and... er, this happened. niaocollective.bearblog.dev
niaocollective.bearblog.dev
Niao Collective
Screenshot 2026-04-05 at 20 A collection of protest art, pamphlets, photos from the HK pro-democracy movement filled with tears and teargas. {{ posts|...
1179
Reposted by Cindʎ Xiao 🍉
wesley b @wesburt.bsky.social · 15/04/2026
the irony of having a one-on-one HR layoff meeting in the conference room with my Loki mural on it
164102472337
Reposted by Cindʎ Xiao 🍉
Andrea Grimes @andreagrimes.com · 14/04/2026
It's such a low-key resistance move but talking about not using AI, especially in a professional context, is so important in working against "inevitability" narratives and so powerful in identifying who your people are — and in ensuring there are more of us all the time.
91083123
Reposted by Cindʎ Xiao 🍉
Kat Tsai @chuwenjie.bsky.social · 14/04/2026
We’re cooking on Beyond the Spider-Verse!!! So excited to share these new stills… see you in IMAX on June 18, 2027!! 🕷️
252491640
Reposted by Cindʎ Xiao 🍉
Jamal Greene @jamalgreene.bsky.social · 13/04/2026
This posture also makes it hard for people to appreciate the many individual, marginal steps that are needed in combination. Incremental steps are too often dismissed as “magical thinking” that won’t “solve” “the problem.” As if there is a single problem or, somewhere out there, a single solution.
0198
Reposted by Cindʎ Xiao 🍉
Christina Chung 鍾書寧 @christinaillos.bsky.social · 11/04/2026
Memories of Hong Kong & Taiwan 💚
22810
Cindʎ Xiao 🍉 @cxiao.net · 10/04/2026
I'll be speaking at @rustconf.com in September! Looking forward to presenting on reverse engineering Rust binaries, to the Rust community! sched.co/2KHt7 #RustConf #RustConf26 #Rustlang #Rust
010
Reposted by Cindʎ Xiao 🍉
中国数字时代 @cdtcn.bsky.social · 09/04/2026
面对家庭暴力、关系伤害或其它暴力时,如何求助、去哪求助是亟需回应的问题。资源地图或许无法解决所有困难,但我们希望它能够在某一个时刻,为需要的伙伴提供方向和安全感。
chinadigitaltimes.net
镇镇的彩虹|资源发布 !第六版多元性别暴力干预服务资源地图上线
面对家庭暴力、关系伤害或其它暴力时,如何求助、去哪求助是亟需回应的问题。资源地图或许无法解决所有困难,但我们希望它能够在某一个时刻,为需要的伙伴提供方向和安全感。
062
Reposted by Cindʎ Xiao 🍉
中国数字时代 @cdtcn.bsky.social · 09/04/2026
当新闻无法改变现实,它的社会意义也被重新定义。
chinadigitaltimes.net
田间 Tian Jian|审查无所不在:中国记者的现实风险
当新闻无法改变现实,它的社会意义也被重新定义。
041
Reposted by Cindʎ Xiao 🍉
kate conger @kateconger.com · 08/04/2026
sourcing request: I am looking for recruiters or managers at major tech companies who are trying to hire cybersecurity talent. if that's you, and you want to talk to me on background or on-record, please get in touch! contact info in my bio.
45529
Reposted by Cindʎ Xiao 🍉
Brian Hioe @brianhioe.bsky.social · 02/04/2026
Will be moderating later this month! A new internationalism is precisely what we need at a time in which campist viewpoints are increasingly a political dead end and, in fact, dangerous. How then, can we find a way forward? This manifesto can be a starting point
084